# Cannot be a symlink to ldap.conf, as nslcd refuses to start if there are unknown options in this file...
URI ldaps://bv1.ruf.uni-freiburg.de ldaps://bv2.ruf.uni-freiburg.de ldaps://bv3.ruf.uni-freiburg.de
base passwd   ou=people,dc=uni-freiburg,dc=de
base group    ou=group,dc=uni-freiburg,dc=de
scope passwd one
scope group one
BIND_TIMELIMIT 5
TIMELIMIT 10
TLS_REQCERT allow
map PASSWD     homeDirectory "${rufClientHome}"

nss_initgroups_ignoreusers avahi,avahi-autoipd,backup,bin,colord,daemon,distccd,games,git,gnats,hplip,irc,kdm,kernoops,libuuid,lightdm,list,lp,mail,man,messagebus,news,ntp,proxy,pulse,root,rtkit,saned,speech-dispatcher,sshd,statd,sync,sys,syslog,usbmux,uucp,whoopsie,www-data